Categories: Platform Security | Capabilities

This page was last modified 17:01, 8 June 2008.

From Forum Nokia Wiki

What are capabilities?

A capability is a feature of Symbian Platform Security, introduced on S60 in S60 3rd Edition (Symbian OS v9.1). For each of the capabilities, each running process (started from an EXE file) either has it or hasn't. Some actions, such as calling a server on the Symbian OS, require the calling process to have a capability. Whether or not the capability is required is controlled by the server that is being called: each server defines its own policy.

Also libraries (DLLs) have capabilities, but these are interpreted a bit differently than capabilities of processes (EXE files). When applied to a DLL, a capability indicates the trust level of the code within the DLL. When the DLL is loaded into a process, the code is executed with the capabilities of the process (EXE), not the capabilities of the DLL. The capabilities of the DLL just indicate to which extent the code in the DLL can be trusted. As an example, an EXE that has a TCB capability cannot load a DLL that does not have the TCB capability because the lack of TCB on a DLL indicates that the DLL code is not trusted to execute under TCB capability.

List of S60 3rd Edition capabilities

Basic capabilities - approved by the end user

• LocalServices
• UserEnvironment
• NetworkServices
• ReadUserData
• WriteUserData

Extended capabilities - approved by Symbian Signing

Express Signed

• Location
• SwEvent
• SurroundingsDD
• ProtServ
• PowerMgmt
• ReadDeviceData
• WriteDeviceData
• TrustedUI

Certified Signed

• NetworkControl
• MultimediaDD
• CommDD
• DiskAdmin

Manufacturer-approved capabilities

• AllFiles
• DRM
• TCB

See Also

• Application types that usually require manufacturer or platform capabilities
• Forum Nokia's official description of capabilities